CN101826030A - Method for Solving Address Space Conflict Between Virtual Machine Monitor and Guest Operating System - Google Patents
Method for Solving Address Space Conflict Between Virtual Machine Monitor and Guest Operating SystemDownload PDFInfo
- Publication number
- CN101826030A CN101826030ACN201010149539ACN201010149539ACN101826030ACN 101826030 ACN101826030 ACN 101826030ACN 201010149539 ACN201010149539 ACN 201010149539ACN 201010149539 ACN201010149539 ACN 201010149539ACN 101826030 ACN101826030 ACN 101826030A
- Authority
- CN
- China
- Prior art keywords
- vmm
- address space
- operating system
- client operating
- trap
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/02—Addressing or allocation; Relocation
- G06F12/0223—User address space allocation, e.g. contiguous or non contiguous base addressing
- G06F12/0284—Multiple user address space allocation, e.g. using different base addresses
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/02—Addressing or allocation; Relocation
- G06F12/08—Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
- G06F12/10—Address translation
- G06F12/1027—Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB]
- G06F12/1036—Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB] for multiple virtual address spaces, e.g. segmentation
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/02—Addressing or allocation; Relocation
- G06F12/08—Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
- G06F12/10—Address translation
- G06F12/109—Address translation for multiple virtual address spaces, e.g. segmentation
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45583—Memory management, e.g. access or allocation
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Memory System Of A Hierarchy Structure (AREA)
- Storage Device Security (AREA)
- Debugging And Monitoring (AREA)
Abstract
Description
The application be that Dec 20 calendar year 2001, application number are 01822837.2 the applying date, denomination of invention divides an application for the application for a patent for invention of " being used to solve the method for the address space conflicts between a monitor of virtual machine and client operating system ".
Technical field
The present invention relates generally to virtual machine, more specifically to the address space conflicts that solves between a monitor of virtual machine and client operating system.
Background technology
Traditional monitor of virtual machine (VMM) is normally operated on the computing machine and to other software and provides one or more virtual machine abstraction.Each virtual machine can play a self-contained platform, " client operating system " of its bootup window oneself (that is operating system of being decided by VMM).Client operating system expectation just looks like that it is just operating on a special purpose computer rather than a virtual machine and operates like that.That is various computer operations of client operating system expectation control and the I/O equipment of computer physics storer and memory mapped is had unrestricted visit, in these operating periods.Yet in a virtual machine environment, VMM should have final control to computer resource to provide virtual machine and the protection between virtual machine.In order to realize this, VMM generally intercept and arbitrate that all are undertaken by client operating system, to the visit of computer resource.
Utilize existing processor (for example, the IA-32 microprocessor), VMM can not intercept the visit of client operating system to hardware resource, unless the part of this VMM code and/or data structure is arranged in the virtual address space identical with client operating system.Yet, client operating system does not expect that VMM code and/or data structure reside in the address space of client operating system and can attempt to visit a zone of being occupied by this VMM in this address space, and this can cause the address space conflicts between this client operating system and VMM.This conflict may cause the abnormal temination by the operation of VMM or client operating system execution.
Therefore, need a kind of mechanism that will detect and solve the address space conflicts between a VMM and client operating system.
Description of drawings
The present invention describes by example in the chart of accompanying drawing but is not limited to this, and wherein similarly reference number relates to similar unit, and accompanying drawing comprises:
Fig. 1 has illustrated an embodiment of a virtual machine environment;
Fig. 2 is a block diagram that is used to solve the system of address space conflicts between a monitor of virtual machine and client operating system according to one embodiment of the present of invention;
Fig. 3 is according to one embodiment of the present of invention, an a kind of process flow diagram that is used to solve the method for the address space conflicts between a monitor of virtual machine and client's method of operating;
Fig. 4 is according to one embodiment of the present of invention, an a kind of process flow diagram that is used for the method for the virtual machine kernel of reorientation in a virtual machine address space;
Fig. 5 has illustrated according to one embodiment of the present of invention, an operation of supporting that the client removes the virtual machine kernel of privilege;
Fig. 6 is according to one embodiment of the present of invention, an a kind of process flow diagram that is used to handle the method for the virtual trap that is produced by a client operating system; And
Fig. 7 is the block diagram of a disposal system embodiment.
Embodiment describes
A kind of method and apparatus that is used to decompose address space conflicts has been described.In the following description, set forth many details, such as distance between assembly, molding type, or the like.Yet,, obviously can put into practice the present invention and without these concrete details for those skilled in the art.In other example, with the block diagram form rather than at length shown well-known structure and equipment, to avoid the present invention that darkens.
In being described below, for the purpose of illustrating, having set forth many concrete details and one of the present invention has thoroughly been understood so that provide.Yet,, obviously can put into practice the present invention and without these concrete details for those skilled in the art.
Algorithm and symbolic representation that some part subsequently describes in detail according to the operation on the data bit in a computer memory provide.These arthmetic statements and expression are by which technician in data processing field to be made to be used for most effectively their work essence is conveyed to device other personnel of this area.Algorithm here, be considered to usually one cause an expected result, coherent sequence of steps (self-consistent sequence ofsteps).These steps are those steps that need the physical operations of physical quantity.Usually, though dispensable, that this tittle is taked is electricity or magnetic, can be stored, transmit, make up, relatively and otherwise the form of operated signal.Sometimes proof expediently mainly is because public purpose, these signals call position, value, element, symbol, character, item, numeral, or the like.
Yet should recognize: all these are with similarly relevant with suitable physical quantity and only be the suitable mark that is applied to this tittle.Be appreciated that in whole the present invention as tangible explanation from the following discussion unless have in addition particularly, the discussion of the term of use such as " processing " or " calculating " or " calculating " or " determining " or " demonstration " or the like may relate to a computer system, the perhaps action of similar electronic computing device and processing procedure, these computer systems or computing equipment are the data manipulation that is represented as physics (electronics) amount in the RS of this computer system and be converted into and be expressed as similarly at computer system memory or register or other such information-storing devices, other data of physical quantity in transmission or the display device.
The invention still further relates to the device that is used to carry out in this operation.This device can be constructed especially for desired purpose, and perhaps it can comprise a multi-purpose computer that is activated or reconfigured by a computer program that is kept in the computing machine selectively.A computer program like this may be kept in the computer-readable recording medium, these storage mediums such as, but be not limited to, comprise any kind disk, ROM (read-only memory) (ROM), random access storage device (RAM), EPROM, EEPROM, magnetic or the light-card of floppy disk, CD, CD-ROM and magneto-optical disk or the medium that any kind is suitable for the store electrons instruction, each in these all is coupled with a computer system bus.Instruction can use one or more treatment facilities (for example, processor, CPU (central processing unit), or the like) to carry out.
Algorithm given herein is not relevant with any specific computing machine or other device inherently with showing.Can use various general machines together in the program of this teaching with foundation, perhaps it can prove that more special-purpose device of structure is easily to carry out desired method step.Will be from finding to be used for the needed structure of various these machines in the following description.In addition, the present invention is not described with reference to any certain programmed language.To be appreciated that: various programming languages can be used for realizing teaching of the present invention described here.
Below in the detailed description of embodiment with reference to the accompanying drawings, accompanying drawing has illustrated by example can implement specific embodiments of the invention.In the accompanying drawings, spread all over several views, similarly numeral has been described similar assembly in fact.Those skilled in the art enough described these embodiment in detail, so that can implement the present invention.Other embodiment can be used and structure, logic can be carried out and the variation of electricity and do not deviate from scope of the present invention.In addition, will be appreciated that: various embodiment of the present invention though be different, must not be mutual exclusions.For example, particular community, structure or a feature of describing in one embodiment can comprise in other embodiments.Below describe in detail, therefore, be not used, and scope of the present invention is only defined by the four corner of the equivalent of accessory claim and such claim with a limited idea.
Method and apparatus among the present invention provides a kind of mechanism that is used for solving the address space conflicts between a client operating system and a monitor of virtual machine (VMM).Fig. 1 has illustrated wherein embodiment of thevirtual machine environment 100 that can operate of the present invention.In this embodiment,naked platform hardware 116 comprises a computing platform, its can, for example, carry out a standard operation system (OS) or a monitor of virtual machine (VMM) such as VMM 112.VMM though usually realize with form of software, can derive the bare machine interface such as a simulation to a high layer software.Such high layer software may comprise a standard or real-time OS, though the present invention is not limited to this scope in this respect, and for example alternatively, a VMM can perhaps move on another VMM in another VMM.The characteristic feature and the function of VMM and they are well-known for the such technician in this area, and can be for example realize with the form of a combination of software, firmware or various technology.
As mentioned above, VMM provides the abstract of one or more virtual machines (VM) to other software (that is " client " software).Shown two VM among Fig. 1,102 and 114 each VM comprise a client OS and a various client software application 108-110 such as client OS 104 or 106.Each client OS 104 and 106 expects that control is to (for example, the I/O equipment of storer and memory mapped) the visit, and the function of carrying out other of the physical resource in the hardware platform that moves at client OS 104 or 106 thereon.Yet in a virtual machine environment, VMM 112 should have the final control of physical resource to provide VM 102 and 114 and protection between VM 102 and 114.VMM 112 achieves this end by the all-access of intercepting client OS 104 and 106 pairs of computer physics resources.For example, a client goes the priority technology can be used for allowing the above-mentioned visit of VMM 112 interceptings.The client goes priority to force all client softwares a hardware level of privilege other places operation that does not allow some hardware resource of softward interview.The result, when client OS 104 or 106 attempted to visit any hardware resource, it " was absorbed in " in VMM 112, promptly, if an operation of being initiated by client operating system relates to the such hardware resource of visit, then VMM 112 receptions are to the control of this operation.It should be noted that: anyly can be used for the control of a similar operations is transferred to VMM 112 from thisclient OS
When the client who uses the visit that allows VMM 112 interceptingclient OS client OS
Fig. 2 is a block diagram that is used to solve thesystem 200 of address space conflicts between a VMM and client OS according to one embodiment of the present ofinvention.System 200 comprises naked platform hardware 214, its comprise one can carry out a client OS (for example, client OS 104 or 106), a VMM (for example, VMM 112), or the like computing platform.Be client software and two independent address spaces 204 of VMM distribution and 202.That is, VM address space 204 is assigned to keep the code and the data structure of client OS and other client software, and VMM address space 202 is allocated for VMM code and data structure.
As mentioned above, some assembly in VMM code and/or the data structure can structurally be required to reside in the address space identical with client OS, to allow the visit of VMM intercepting client OS to hardware resource.For example, for IA-32 order set structure (ISA), when the client went privilege to be used to guarantee VMM to the control of client OS access hardware resource, one comprised and points to trap and handle the interrupt-descriptor table (IDT) of the pointer of routine and structurally will be resided in the address space identical with client OS.Support the client to go one embodiment of the present of invention of privilege with describing in more detail in conjunction with Fig. 5 and 6 below.For other ISA, the various other parts of VMM code and/or data structure can structurally be required to reside in the space address identical with client OS, with the visit that allows VMM control client OS that hardware resource is carried out.
In one embodiment, VMM code and structure are divided into two parts.The first of VMM comprises one group of address space that is required to reside in client OS, i.e. code and/or data structure in the VM address space 204.The second portion of VMM comprises remaining VMM code and data structure.In one embodiment, a software program (being called as virtual machine kernel 210) is collected the VMM code be required to be located in the address space identical with client OS and/or a minimal set of data structure.Remaining VMM code and data structure are compiled as an independent program and are arranged in VMM address space 202.Virtual machine kernel (VMK) 210 oneself becomes VM address space 204 and VMM address space 202 to it then.
Subsequently, attempt to visit in VM address space 204, occupied by VMM code and/or data structure as client OS one when regional, VMK 210 detects this trial of client OS.In one embodiment, if incident of being initiated by client OS may cause an address space conflicts between client OS and VMM, the control that VMK 210 receives this incident.The client goes privilege or can be used for the control of such incident is transferred to VMM code and/or the data structure that resides in the VM address space 204 from client OS at any other hardware known in the art or software mechanism.
VMK 210 calculates this incident then to determine its reason.When detect this incident be by client OS attempt to visit by VMM code and/or data structure occupy regional caused the time, this VMK 210 oneself is remapped to the zone of a zones of different to allow client OS visit before to be used by VMK 210 in VM address space 204 to it.An a kind of embodiment who is used for the method for reorientation VMK 210 in VM address space 204 has carried out more detailed description in conjunction with Fig. 4 below.
Fig. 3 is the process flow diagram that is used to solve an embodiment of themethod 300 of address space conflicts between a VMM and client OS according to one embodiment of the present ofinvention.Method 300 begins (processing block 304) VMM is divided into first and second portion.As mentioned above, first comprises one group of VMM code and/or data structure that structurally is required to reside in the address space identical with client OS.The second portion of VMM comprises remaining VMM code and data structure.In an embodiment (more detailed description below), the first of VMM comprises one a group of trap handler and an interrupt-descriptor table (IDT).In the embodiment that replaces, first comprises must reside in various other data structures and code in the address space identical with client OS, VMM.
Next, create one first address space (promptly, VM address space 204) keeps the code and the data structure (processing block 306) of client OS and other client software, and establishment is used for one second address space (that is, the VMM address space 202) (processing block 308) of VMM code and data structure.In one embodiment, during boot process, create these address spaces.
In addition, the first of VMM is mapped to (processing block 310) in VM address space and the VMM address space, and the second portion of VMM is loaded into (processing block 312) in the VMM address space.
Atprocessing block 314 places, detect client OS and attempt to visit the zone that the first by VMM occupies.In one embodiment, if an incident of being initiated by client OS may cause an address space conflicts between client operating system and VMM,, the first that the control of this incident is transferred to VMM attempts by being detected such one.In conjunction with Fig. 5 and 6 embodiment who detects a possible address space conflicts is described in more detail below.
After this, atprocessing block 316 places, the first of VMM is relocated to another zone in this VM address space, to allow the visit of client OS to the zone that before occupied by VMM first.Anyly follow-up attempt to cause its reorientating in the VM address space once more to the visit of the new region that occupies by VMM first.In Fig. 4, shown a kind of embodiment of method that one of reorientation comprises the VMK of VMM first that is used for.
Referring to Fig. 4, after an address space conflicts that detects between client OS and VMM (processing block 404), be this VM address space of a untapped range searching (processing block 406).Atdecision box 408 places, carry out a relevant untapped zone and whether be present in determining in the VM address space.If it be sure for this to determine, the VMK that then comprises VMM code and data structure first is re-mapped in this untapped zone, and controls to be transferred and get back to client OS, and it can visit the zone of before having been used by VMK now.
Alternatively, if in the VM address space, there is not untapped zone, be the words that client OS has used whole VM address space, then in this VM address space, select a random areas (processing block 412), the memory content that is arranged in chosen location is copied to the buffer (processing block 414) at the VMM address space, and VMK is re-mapped in the selection area in the VM address space (processing block 416).Serve follow-up memory access by the buffer in comprising the former meaningful VMM address space in new VMK zone by the memory access of simulation to this selection area (that is, new VMK zone).In one embodiment, by termly VMK being reoriented to random areas in the VM address space till finding a zone that seldom is used, reduce the frequency that such analog memory is quoted.
Fig. 5 has illustrated according to one embodiment of the present of invention, an operation of supporting that the client removes the VMK of privilege.As mentioned above, the client goes privilege to cause client OS low level of privilege other places operation, so that when client OS attempted to issue the privileged instruction of operation of relevant this processor system state, it " was absorbed in " in VMM.In one embodiment, support the client to go the VMM of privilege in interrupt-descriptor table (IDT) 514, to settle and point to the pointer that trap is handled routine (that is,trap handler 552).Some ISA (for example, IA-32 ISA) requires IDT 514 to reside in the virtual address space (that is, the VM address space 504) of current active.In one embodiment, the inlet in IDT 514 (entry) is a task gate, and it provides an address space to switch.That is when producing a trap, be the pointer Searching IDT 514 that a sensing trap is handled routine.If this pointer is a task gate, it will allow a direct switching to the VMM address space, and this VMM address space comprises a trap processing routine that is used to produce trap.Therefore, though task gate it oneself must reside in this VM address space unnecessary the residing in the VM address space of the trap handler corresponding to task gate.In another embodiment, the inlet in IDT 514 is trap door or interrupt gate, and it does not provide address space to switch.Therefore, relevant with such IDT inlet trap handler must reside in the VM address space.In addition, VMM can place the shade version of other data structure (for example, describe, in general terms symbol table) in the VM address space.
In one embodiment, VMK 510 (for example collects the trap handler that must be arranged in the VM address space and/or data structure, IDT 514) a minimal set together, they are become VM address space 504 and VMMaddress space 502, and keep the access rights of the page or leaf of VMK 510 (for example to be set to the most franchise rank, for the IA-32 microprocessor, has " power user " privilege level of ring=0).As mentioned above, client OS operates in the privileged mode and (for example, for the IA-32 microprocessor, has " user " pattern of ring=3).As a result, in one embodiment, when client OS attempted to visit privileged machine resources, client OS produced virtual trap, and privileged machine resources comprises the page or leaf that keeps with the VMK 510 of highly privileged access rights protection.
In one embodiment, when producing a virtual trap, be a respective pointer Searching IDT 514 who points to trap handler.In one embodiment, trap can be handled by the resident trap handler of VMM.In this embodiment, VMK carries out two address spaces and switches--and-one is sent to the switching of the trap handler in VMMaddress space 502 to this trap, and one has been converted back to second switching of VM address space 504 at this trap after the resident trap handler service by VMM.
Alternatively, can in a resident handling procedure of VMK, handle a trap.For example, a trap can be caused with a mark in the register that resets at this processor by an instruction among the client OS.A trap like this can be handled intrap handler 552 fully, and need not transfer control to the VMM in VMMaddress space 502, and such realization will cause more performance.
One type virtual trap is to attempt to visit the collision error that in the current VM address space 504 that is used by VMK 510 one produces when regional as client OS.As top in conjunction with Fig. 4 in more detail as described in, VMK 510 handles these collision errors by it being remapped to itself in the new region in this VM address space 504.
Fig. 6 is according to one embodiment of the present of invention, an a kind of process flow diagram that is used to handle themethod 600 of the virtual trap that is produced by a client OS.Method 600 is set to a ratio privilege level higher privilege level relevant with this client OS with the access rights in the zone that occupied by VMK and begins (processingblock 604).For example, all VMK pages or leaves can shine upon with the privilege (ring=0) that only is the power user, and client OS can be configured to operate in the User Status (ring=3) of going privilege.
Atprocessing block 606 places, a trap that is produced by client OS has been received.This trap is caused by the hardware resource that client OS attempts access privileges.Whether atdecision box 608 places, carrying out relevant this trap can determining by VMK inter-process (for example, in the resident trap handler of VMK).Consequently can not handle if this trap is too complicated by VMK, it (is for example handed to the VMM address space, handed to the resident trap handler of VMM) (processing block 610), after this trap is by the VMM service, continue to get back to VM address space (processing block 612) then.After this, the control to the incident that causes this trap turns back to client OS (processing block 620).
Alternatively, if by the VMK inter-process, then making about this trap, trap whether determines (decision box 614) by one that causes at the code of VMK code and data structure and client OS and an address space conflicts between the data structure., this trap caused that then VMK code and data structure are relocated to the new region (processing block 618) in this VM address space if being actually by an address space conflicts.Alternatively, in a corresponding trap handler, handle this trap (processing block 616).After this, the control to the incident that causes this trap turns back to client OS (processing block 620).
Fig. 7 is the block diagram of a disposal systemembodiment.Disposal system 700 comprisesprocessor 720 and storer 730.Processor 720 can be can executive software any kind processor, such as microprocessor, digital signal processor, microcontroller, or thelike.Disposal system 700 can be that a personal computer (PC), large scale computer, handheld device, portable computer, set-top box or any other comprise the system of software.
To be appreciated that: above description be used for illustrative, rather than the restriction.Read and understand according to described above, many other embodiment are conspicuous for those skilled in the art.Therefore scope of the present invention should be with reference to additional claim, and the four corner of the equivalent of such claim, determines.
Claims (30)
1. method comprises:
Detect client operating system and attempt the zone that visit occupies in first address space, by the first of monitor of virtual machine (VMM); And
The first of reorientation VMM is to allow the previous zone that is occupied by the first of VMM of client operating system visit in first address space.
2. the method for claim 1, it is characterized in that: the first of VMM comprises one group of VMM code and data structure of structurally requiring to reside in first address space.
3. the method for claim 1, it is characterized in that: the first of VMM comprises one group of trap handler and interrupt-descriptor table (IDT).
4. the method for claim 1 further comprises:
VMM is divided into first and second portion;
Create first address space relevant with client operating system;
Create second address space relevant with VMM;
The second portion of location VMM in second address space relevant with VMM; And
The first of this VMM is mapped in first address space and second address space.
5. the method for claim 1 further comprises:
When the incident of being initiated by client operating system may cause address space conflicts between client operating system and VMM, receive control to this incident.
6. method as claimed in claim 5 is characterized in that: receive control and further comprise:
The access rights of the part that is occupied by VMM first are set to the privilege level higher than the privilege level relevant with client operating system; And
Reception is attempted to visit the caused trap of hardware resource with privilege level higher than the privilege level relevant with this client operating system by client operating system.
7. method as claimed in claim 6 further comprises:
Determine that this trap can be by first's processing of VMM;
Carry out the code relevant with this trap; And
Return the client operating system that controls to this incident.
8. method as claimed in claim 6 further comprises:
Determine that this trap should be by the second portion processing of VMM;
This trap is sent to the second portion of VMM;
After the code relevant with this trap carried out by the second portion of VMM, the control to this incident is delivered to client operating system.
9. the method for claim 1, it is characterized in that: the first of reorientation VMM further comprises:
In first address space, search untapped zone; And
The first of this VMM is remapped in this untapped zone.
10. the method for claim 1, it is characterized in that: the first of reorientation VMM further comprises:
Determine in this first address space, not have untapped zone to exist;
In first address space, select random areas;
The content of duplicating the storer that is positioned at this random areas place is to second address space; And
The first of this VMM is remapped in this random areas.
11. method as claimed in claim 10 further comprises:
Reception is to the control of the incident initiated by client operating system, and this incident attempts to visit the content of the storer that before had been positioned at this random areas place corresponding to client operating system; And
Visit memory content in second address space, that duplicate.
12. method as claimed in claim 11 further comprises periodically this VMM first is reoriented to random areas in first address space, till finding seldom accessed zone.
13. a device comprises:
First address space relevant with client operating system;
Second address space relevant with monitor of virtual machine (VMM); And
The virtual machine kernel, be used to detect client operating system and attempt visit the zone that in first address space, by VMM first, occupies, and in first address space zone of first of this VMM of reorientation to allow the client operating system visit before to occupy by VMM first.
14. device as claimed in claim 13 is characterized in that: the first of VMM comprises one group of VMM code and data structure of structurally requiring to reside in first address space.
15. device as claimed in claim 13 is characterized in that: the first of VMM comprises one group of trap handler and interrupt-descriptor table (IDT).
16. device as claimed in claim 13, it is characterized in that: the virtual machine kernel is divided into first and second portion to VMM, the second portion of VMM is positioned in second address space relevant with this VMM, and the first of VMM is mapped in first address space and second address space.
17. device as claimed in claim 13 is characterized in that: when the incident of being initiated by client operating system may cause address space conflicts between client operating system and VMM, the virtual machine kernel will receive the control to this incident.
18. device as claimed in claim 13, it is characterized in that: the virtual machine kernel is set to the privilege level higher than the privilege level relevant with this client operating system by the access rights of the part that occupied by VMM first, and attempt to visit the caused trap of hardware resource by client operating system with privilege level higher than the privilege level relevant with this client operating system by receiving, receive control.
19. device as claimed in claim 18 is characterized in that: the virtual machine kernel will further determine this trap to be handled by the first of VMM, carry out the code relevant with this trap, and return the client operating system that controls to this incident.
20. device as claimed in claim 18 is characterized in that: this virtual machine kernel with further determine this trap should handle by the second portion of VMM, be delivered to the second portion of VMM to this trap and the code relevant with this trap carried out by the second portion of VMM after handle the control of this incident is delivered to this client operating system.
21. device as claimed in claim 13 is characterized in that: this virtual machine kernel will be by searching untapped zone and this VMM first being remapped to the first that comes reorientation VMM in the untapped zone in first address space.
22. device as claimed in claim 13 is characterized in that: this virtual machine kernel will by determine in this first address space, not have untapped zone to exist, in this first address space, select random areas, the content of duplicating the storer that is arranged in this random areas place is remapped to the first that this random areas is come reorientation VMM to second address space and this VMM first.
23. device as claimed in claim 13, it is characterized in that: this virtual machine kernel will receive the control to the incident of being initiated by client operating system, wherein this incident attempts to visit the content of the storer that before had been positioned at this random areas place corresponding to client operating system, and visits memory content in second address space, that duplicate.
24. device as claimed in claim 13 is characterized in that: this virtual machine kernel will be periodically be reoriented to random areas in first address space to this VMM first, till finding seldom accessed zone.
25. a system comprises:
The storer that comprises first address space relevant and second address space relevant with monitor of virtual machine (VMM) with client operating system; And
Processor with this storer coupling, be used to detect client operating system and attempt visit the zone that in first address space, by VMM first, occupies, and in first address space zone of first of this VMM of reorientation to allow the client operating system visit before to occupy by VMM first.
26. system as claimed in claim 25 is characterized in that: the first of VMM comprises one group of VMM code and data structure of structurally requiring to reside in first address space.
27. system as claimed in claim 25 is characterized in that: the first of VMM comprises one group of trap handler and interrupt-descriptor table (IDT).
28. the computer-readable medium that instruction is provided when these instructions are carried out on processor, causes described processor to carry out following operation:
Detect client operating system and attempt the zone that visit occupies in first address space, by the first of monitor of virtual machine (VMM); And
The first of reorientation VMM is to allow the previous zone that is occupied by the first of VMM of client operating system visit in first address space.
29. computer-readable medium as claimed in claim 28 comprises further instruction, it causes processor to carry out following operation:
In first address space, search untapped zone; And
The first of this VMM is remapped in this untapped zone.
30. computer-readable medium as claimed in claim 28 comprises further instruction, it causes processor to carry out following operation:
Determine in this first address space, not have untapped zone to exist;
In first address space, select random areas;
Duplicate be positioned at this random areas place memory content to second address space; And
The first of this VMM is remapped in this random areas.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US09/752,587US7035963B2 (en) | 2000-12-27 | 2000-12-27 | Method for resolving address space conflicts between a virtual machine monitor and a guest operating system |
| US09/752587 | 2000-12-27 |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN018228372ADivisionCN1575453B (en) | 2000-12-27 | 2001-12-20 | Method and device for solving address space conflict |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101826030Atrue CN101826030A (en) | 2010-09-08 |
| CN101826030B CN101826030B (en) | 2012-12-05 |
Family
ID=25026926
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2010101495395AExpired - Fee RelatedCN101826030B (en) | 2000-12-27 | 2001-12-20 | Method for Solving Address Space Conflict Between Virtual Machine Monitor and Guest Operating System |
| CN018228372AExpired - Fee RelatedCN1575453B (en) | 2000-12-27 | 2001-12-20 | Method and device for solving address space conflict |
Family Applications After (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN018228372AExpired - Fee RelatedCN1575453B (en) | 2000-12-27 | 2001-12-20 | Method and device for solving address space conflict |
Country Status (10)
| Country | Link |
|---|---|
| US (2) | US7035963B2 (en) |
| EP (1) | EP1405181A2 (en) |
| JP (1) | JP4021769B2 (en) |
| KR (1) | KR100624668B1 (en) |
| CN (2) | CN101826030B (en) |
| AU (1) | AU2002249862A1 (en) |
| BR (1) | BR0116630A (en) |
| RU (1) | RU2259582C2 (en) |
| TW (1) | TWI228221B (en) |
| WO (1) | WO2002056172A2 (en) |
Families Citing this family (108)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6745346B2 (en)* | 2000-12-08 | 2004-06-01 | Intel Corporation | Method for efficiently identifying errant processes in a computer system by the operating system (OS) for error containment and error recovery |
| US7461148B1 (en)* | 2001-02-16 | 2008-12-02 | Swsoft Holdings, Ltd. | Virtual private server with isolation of system components |
| US7260820B1 (en)* | 2001-04-26 | 2007-08-21 | Vm Ware, Inc. | Undefeatable transformation for virtual machine I/O operations |
| US7103529B2 (en)* | 2001-09-27 | 2006-09-05 | Intel Corporation | Method for providing system integrity and legacy environment emulation |
| US7058786B1 (en)* | 2002-01-17 | 2006-06-06 | Hewlett-Packard Development Company | Operating system data communication method and system |
| US6996748B2 (en)* | 2002-06-29 | 2006-02-07 | Intel Corporation | Handling faults associated with operation of guest software in the virtual-machine architecture |
| US7124327B2 (en)* | 2002-06-29 | 2006-10-17 | Intel Corporation | Control over faults occurring during the operation of guest software in the virtual-machine architecture |
| US7149510B2 (en) | 2002-09-23 | 2006-12-12 | Telefonaktiebolaget Lm Ericsson (Publ) | Security access manager in middleware |
| US7278030B1 (en)* | 2003-03-03 | 2007-10-02 | Vmware, Inc. | Virtualization system for computers having multiple protection mechanisms |
| US7111145B1 (en)* | 2003-03-25 | 2006-09-19 | Vmware, Inc. | TLB miss fault handler and method for accessing multiple page tables |
| US7409487B1 (en)* | 2003-06-30 | 2008-08-05 | Vmware, Inc. | Virtualization system for computers that use address space indentifiers |
| US20050044408A1 (en)* | 2003-08-18 | 2005-02-24 | Bajikar Sundeep M. | Low pin count docking architecture for a trusted platform |
| US7370324B2 (en)* | 2003-09-30 | 2008-05-06 | Intel Corporation | Switching between a service virtual machine and a guest virtual machine in a virtual machine monitor environment |
| US7376949B2 (en)* | 2003-10-01 | 2008-05-20 | Hewlett-Packard Development Company, L.P. | Resource allocation and protection in a multi-virtual environment |
| JP2007510198A (en)* | 2003-10-08 | 2007-04-19 | ユニシス コーポレーション | Paravirtualization of computer systems using hypervisors implemented in host system partitions |
| US20050132122A1 (en)* | 2003-12-16 | 2005-06-16 | Rozas Carlos V. | Method, apparatus and system for monitoring system integrity in a trusted computing environment |
| US7877747B2 (en) | 2004-02-20 | 2011-01-25 | Hewlett-Packard Development Company, L.P. | Flexible operating system operable as either native or as virtualized |
| US7725643B1 (en)* | 2004-05-04 | 2010-05-25 | Oracle America, Inc. | Methods and systems for detecting and avoiding an address dependency between tasks |
| US7802250B2 (en)* | 2004-06-28 | 2010-09-21 | Intel Corporation | Support for transitioning to a virtual machine monitor based upon the privilege level of guest software |
| US7607011B1 (en)* | 2004-07-16 | 2009-10-20 | Rockwell Collins, Inc. | System and method for multi-level security on a network |
| US7685391B1 (en)* | 2004-10-12 | 2010-03-23 | Sun Microsystems, Inc. | Kernel/user stack relocation during system uptime |
| DE602004027516D1 (en)* | 2004-12-03 | 2010-07-15 | St Microelectronics Srl | A method for managing virtual machines in a physical processing machine, a corresponding processor system and computer program product therefor |
| US7395405B2 (en)* | 2005-01-28 | 2008-07-01 | Intel Corporation | Method and apparatus for supporting address translation in a virtual machine environment |
| US7685635B2 (en)* | 2005-03-11 | 2010-03-23 | Microsoft Corporation | Systems and methods for multi-level intercept processing in a virtual machine environment |
| US20070006178A1 (en)* | 2005-05-12 | 2007-01-04 | Microsoft Corporation | Function-level just-in-time translation engine with multiple pass optimization |
| US7496495B2 (en)* | 2005-05-12 | 2009-02-24 | Microsoft Corporation | Virtual operating system device communication relying on memory access violations |
| US20060277546A1 (en)* | 2005-06-02 | 2006-12-07 | Rothman Michael A | Detecting virtualization |
| US7370137B2 (en)* | 2005-06-06 | 2008-05-06 | Intel Corporation | Inter-domain data mover for a memory-to-memory copy engine |
| JP2007004661A (en)* | 2005-06-27 | 2007-01-11 | Hitachi Ltd | Virtual computer control method and program |
| US8856473B2 (en)* | 2005-07-01 | 2014-10-07 | Red Hat, Inc. | Computer system protection based on virtualization |
| US8327353B2 (en)* | 2005-08-30 | 2012-12-04 | Microsoft Corporation | Hierarchical virtualization with a multi-level virtualization mechanism |
| RU2294010C1 (en)* | 2005-09-05 | 2007-02-20 | Павел Михайлович Шестаков | Digital data processing method |
| US8429629B2 (en) | 2005-11-30 | 2013-04-23 | Red Hat, Inc. | In-kernel virtual machine for low overhead startup and low resource usage |
| US8104034B2 (en)* | 2005-11-30 | 2012-01-24 | Red Hat, Inc. | Purpose domain for in-kernel virtual machine for low overhead startup and low resource usage |
| US8612970B2 (en)* | 2005-11-30 | 2013-12-17 | Red Hat, Inc. | Purpose domain for low overhead virtual machines |
| US7548999B2 (en)* | 2006-01-17 | 2009-06-16 | Advanced Micro Devices, Inc. | Chained hybrid input/output memory management unit |
| US7536541B2 (en) | 2006-03-07 | 2009-05-19 | Novell Inc. | Parallelizing multiple boot images with virtual machines |
| US9213542B2 (en)* | 2006-03-30 | 2015-12-15 | Microsoft Technology Licensing, Llc | Creating templates of offline resources |
| US7577820B1 (en) | 2006-04-14 | 2009-08-18 | Tilera Corporation | Managing data in a parallel processing environment |
| US7774579B1 (en)* | 2006-04-14 | 2010-08-10 | Tilera Corporation | Protection in a parallel processing environment using access information associated with each switch to prevent data from being forwarded outside a plurality of tiles |
| US8321377B2 (en)* | 2006-04-17 | 2012-11-27 | Microsoft Corporation | Creating host-level application-consistent backups of virtual machines |
| US8176485B2 (en)* | 2006-05-15 | 2012-05-08 | Microsoft Corporation | Launching hypervisor under running operating system |
| US20070271560A1 (en)* | 2006-05-18 | 2007-11-22 | Microsoft Corporation | Deploying virtual machine to host based on workload characterizations |
| US7587663B2 (en)* | 2006-05-22 | 2009-09-08 | Intel Corporation | Fault detection using redundant virtual machines |
| US8024727B2 (en)* | 2006-06-15 | 2011-09-20 | Microsoft Corporation | Enhancing or replacing host operating system functionality by leveraging guest operating system functionality |
| US20070294707A1 (en)* | 2006-06-15 | 2007-12-20 | Microsoft Corporation | Enhancing or replacing host operating system functionality by leveraging guest operating system functionality |
| DE102006029756A1 (en) | 2006-06-27 | 2008-01-03 | Deutsche Telekom Ag | Procedure for delegating privileges to a lower privilege instance by a higher privilege instance |
| JP2008033392A (en)* | 2006-07-26 | 2008-02-14 | Nec Corp | Virtual computer system and operation method thereof |
| US7478228B2 (en)* | 2006-08-31 | 2009-01-13 | Qualcomm Incorporated | Apparatus for generating return address predictions for implicit and explicit subroutine calls |
| US7490191B2 (en)* | 2006-09-22 | 2009-02-10 | Intel Corporation | Sharing information between guests in a virtual machine environment |
| US20080104586A1 (en)* | 2006-10-27 | 2008-05-01 | Microsoft Corporation | Allowing Virtual Machine to Discover Virtual Status Thereof |
| US7689817B2 (en)* | 2006-11-16 | 2010-03-30 | Intel Corporation | Methods and apparatus for defeating malware |
| US9189265B2 (en) | 2006-12-21 | 2015-11-17 | Vmware, Inc. | Storage architecture for virtual machines |
| US9354927B2 (en) | 2006-12-21 | 2016-05-31 | Vmware, Inc. | Securing virtual machine data |
| US9098347B2 (en) | 2006-12-21 | 2015-08-04 | Vmware | Implementation of virtual machine operations using storage system functionality |
| US7765374B2 (en)* | 2007-01-25 | 2010-07-27 | Microsoft Corporation | Protecting operating-system resources |
| US8380987B2 (en)* | 2007-01-25 | 2013-02-19 | Microsoft Corporation | Protection agents and privilege modes |
| KR101396831B1 (en)* | 2007-03-30 | 2014-05-21 | 삼성전자주식회사 | Method of Controlling Memory Access |
| US7984483B2 (en)* | 2007-04-25 | 2011-07-19 | Acxess, Inc. | System and method for working in a virtualized computing environment through secure access |
| US8561060B2 (en)* | 2007-04-26 | 2013-10-15 | Advanced Micro Devices, Inc. | Processor and method configured to determine an exit mechanism using an intercept configuration for a virtual machine |
| US20090007100A1 (en)* | 2007-06-28 | 2009-01-01 | Microsoft Corporation | Suspending a Running Operating System to Enable Security Scanning |
| CN101334751B (en)* | 2007-06-29 | 2010-04-14 | 联想(北京)有限公司 | Method and device for virtual machine monitor recognizing client operating system progress |
| US8763115B2 (en)* | 2007-08-08 | 2014-06-24 | Vmware, Inc. | Impeding progress of malicious guest software |
| CA2699564C (en)* | 2007-09-20 | 2014-07-08 | C&S Operations, Inc. | Computer system with tunneling |
| CN101425020A (en)* | 2007-10-31 | 2009-05-06 | 国际商业机器公司 | Method and device for accelerating MMU emulation and total system emulator |
| KR100881386B1 (en) | 2008-01-24 | 2009-02-02 | 주식회사 파수닷컴 | How to prevent the DRM client conflict by executing process separation |
| CN101727331B (en)* | 2008-10-24 | 2013-03-20 | 国际商业机器公司 | Method and equipment for upgrading client operating system of active virtual machine |
| US8806101B2 (en)* | 2008-12-30 | 2014-08-12 | Intel Corporation | Metaphysical address space for holding lossy metadata in hardware |
| US8627014B2 (en)* | 2008-12-30 | 2014-01-07 | Intel Corporation | Memory model for hardware attributes within a transactional memory system |
| US9785462B2 (en) | 2008-12-30 | 2017-10-10 | Intel Corporation | Registering a user-handler in hardware for transactional memory event handling |
| US8627017B2 (en)* | 2008-12-30 | 2014-01-07 | Intel Corporation | Read and write monitoring attributes in transactional memory (TM) systems |
| US9535767B2 (en) | 2009-03-26 | 2017-01-03 | Microsoft Technology Licensing, Llc | Instantiating a virtual machine with a virtual non-uniform memory architecture |
| US9529636B2 (en) | 2009-03-26 | 2016-12-27 | Microsoft Technology Licensing, Llc | System and method for adjusting guest memory allocation based on memory pressure in virtual NUMA nodes of a virtual machine |
| US8429648B2 (en)* | 2009-05-28 | 2013-04-23 | Red Hat, Inc. | Method and apparatus to service a software generated trap received by a virtual machine monitor |
| US8813069B2 (en)* | 2009-05-29 | 2014-08-19 | Red Hat, Inc. | Migration of functionalities across systems |
| US20110197256A1 (en)* | 2009-12-18 | 2011-08-11 | Assured Information Security, Inc. | Methods for securing a processing system and devices thereof |
| KR20110094764A (en)* | 2010-02-17 | 2011-08-24 | 삼성전자주식회사 | Virtualization Apparatus and Method for Providing Transaction-Based I / O Interface |
| US20110219373A1 (en)* | 2010-03-02 | 2011-09-08 | Electronics And Telecommunications Research Institute | Virtual machine management apparatus and virtualization method for virtualization-supporting terminal platform |
| US9529729B2 (en)* | 2010-11-16 | 2016-12-27 | International Business Machines Corporation | Location of memory management translations in an emulated processor |
| WO2012177464A1 (en)* | 2011-06-13 | 2012-12-27 | Lynuxworks, Inc. | Systems and methods of secure domain isolation |
| US9804870B2 (en) | 2011-10-28 | 2017-10-31 | Intel Corporation | Instruction-set support for invocation of VMM-configured services without VMM intervention |
| KR20130050156A (en)* | 2011-11-07 | 2013-05-15 | 한국전자통신연구원 | Apparatus for translating virtual address space |
| WO2013085511A1 (en)* | 2011-12-07 | 2013-06-13 | Intel Corporation | Techniques to prelink software to improve memory de-duplication in a virtual system |
| RU2472215C1 (en) | 2011-12-28 | 2013-01-10 | Закрытое акционерное общество "Лаборатория Касперского" | Method of detecting unknown programs by load process emulation |
| EP4116824A1 (en) | 2012-06-26 | 2023-01-11 | Lynx Software Technologies Inc. | Systems and methods involving features of hardware virtualization such as separation kernel hypervisors, hypervisors, hypervisor guest context, hypervisor context, rootkit detection prevention, and/or other features |
| US10310973B2 (en)* | 2012-10-25 | 2019-06-04 | Nvidia Corporation | Efficient memory virtualization in multi-threaded processing units |
| CN103699388B (en)* | 2013-12-30 | 2015-07-08 | 北京控制工程研究所 | Data Access Conflict Detection Method Based on Absolute Address Aggregation |
| US9740857B2 (en) | 2014-01-16 | 2017-08-22 | Fireeye, Inc. | Threat-aware microvisor |
| US9436395B2 (en)* | 2014-03-14 | 2016-09-06 | Advanced Micro Devices, Inc. | Mechanisms to save user/kernel copy for cross device communications |
| WO2015176029A1 (en) | 2014-05-15 | 2015-11-19 | Lynx Software Technologies, Inc. | Systems and methods involving features of hardware virtualization such as hypervisor, pages of interest, and/or other features |
| WO2016004263A1 (en) | 2014-07-01 | 2016-01-07 | Lynx Software Technologies, Inc. | Systems and methods involving aspects of hardware virtualization such as separation kernel hypervisors, hypervisors, hypervisor guest context, hypervisor context, anti-fingerprinting, and/or other features |
| WO2015176048A1 (en) | 2014-05-15 | 2015-11-19 | Lynx Software Technologies, Inc. | Aspects of hardware virtualization, hypervisors, code detection |
| WO2015176046A1 (en) | 2014-05-15 | 2015-11-19 | Lynx Software Technologies, Inc. | Systems and methods involving features of hardware virtualization, hypervisor, apis of interest, and/or other features |
| US11782745B2 (en) | 2014-07-01 | 2023-10-10 | Lynx Software Technologies, Inc. | Systems and methods involving aspects of hardware virtualization such as separation kernel hypervisors, hypervisors, hypervisor guest context, hypervisor context, anti-fingerprinting and/or other features |
| US9934376B1 (en) | 2014-12-29 | 2018-04-03 | Fireeye, Inc. | Malware detection appliance architecture |
| US10474813B1 (en) | 2015-03-31 | 2019-11-12 | Fireeye, Inc. | Code injection technique for remediation at an endpoint of a network |
| US9912681B1 (en) | 2015-03-31 | 2018-03-06 | Fireeye, Inc. | Injection of content processing delay in an endpoint |
| US10454950B1 (en) | 2015-06-30 | 2019-10-22 | Fireeye, Inc. | Centralized aggregation technique for detecting lateral movement of stealthy cyber-attacks |
| US10846117B1 (en) | 2015-12-10 | 2020-11-24 | Fireeye, Inc. | Technique for establishing secure communication between host and guest processes of a virtualization architecture |
| US10447728B1 (en) | 2015-12-10 | 2019-10-15 | Fireeye, Inc. | Technique for protecting guest processes using a layered virtualization architecture |
| US10108446B1 (en) | 2015-12-11 | 2018-10-23 | Fireeye, Inc. | Late load technique for deploying a virtualization layer underneath a running operating system |
| RU2626550C1 (en)* | 2016-08-09 | 2017-07-28 | Акционерное Общество "Научно-Исследовательский Институт Микроэлектронной Аппаратуры "Прогресс" | Program-hardware platform and method of its realisation for wireless communication facilities |
| US10191861B1 (en) | 2016-09-06 | 2019-01-29 | Fireeye, Inc. | Technique for implementing memory views using a layered virtualization architecture |
| US10909053B2 (en)* | 2019-05-27 | 2021-02-02 | Advanced Micro Devices, Inc. | Providing copies of input-output memory management unit registers to guest operating systems |
| US10853263B1 (en)* | 2019-07-23 | 2020-12-01 | Ati Technologies Ulc | Unified kernel virtual address space for heterogeneous computing |
| CN111124664B (en) | 2019-11-22 | 2023-12-08 | 华为技术有限公司 | Method and device for accessing second operating system resource by first operating system |
| KR20220157145A (en) | 2021-05-20 | 2022-11-29 | 삼성전자주식회사 | Virtualized system and method of preventing memory crash of same |
| US20230033583A1 (en)* | 2021-07-30 | 2023-02-02 | Advanced Micro Devices, Inc. | Primary input-output queue serving host and guest operating systems concurrently |
Family Cites Families (260)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US3699532A (en) | 1970-04-21 | 1972-10-17 | Singer Co | Multiprogramming control for a data handling system |
| US3996449A (en) | 1975-08-25 | 1976-12-07 | International Business Machines Corporation | Operating system authenticator |
| US4162536A (en) | 1976-01-02 | 1979-07-24 | Gould Inc., Modicon Div. | Digital input/output system and method |
| US4037214A (en) | 1976-04-30 | 1977-07-19 | International Business Machines Corporation | Key register controlled accessing system |
| US4247905A (en) | 1977-08-26 | 1981-01-27 | Sharp Kabushiki Kaisha | Memory clear system |
| US4278837A (en) | 1977-10-31 | 1981-07-14 | Best Robert M | Crypto microprocessor for executing enciphered programs |
| US4276594A (en) | 1978-01-27 | 1981-06-30 | Gould Inc. Modicon Division | Digital computer with multi-processor capability utilizing intelligent composite memory and input/output modules and method for performing the same |
| US4207609A (en) | 1978-05-08 | 1980-06-10 | International Business Machines Corporation | Method and means for path independent device reservation and reconnection in a multi-CPU and shared device access system |
| JPS5823570B2 (en) | 1978-11-30 | 1983-05-16 | 国産電機株式会社 | Liquid level detection device |
| JPS5576447A (en) | 1978-12-01 | 1980-06-09 | Fujitsu Ltd | Address control system for software simulation |
| US4307447A (en) | 1979-06-19 | 1981-12-22 | Gould Inc. | Programmable controller |
| US4307214A (en) | 1979-12-12 | 1981-12-22 | Phillips Petroleum Company | SC2 activation of supported chromium oxide catalysts |
| US4319323A (en) | 1980-04-04 | 1982-03-09 | Digital Equipment Corporation | Communications device for data processing system |
| US4419724A (en) | 1980-04-14 | 1983-12-06 | Sperry Corporation | Main bus interface package |
| US4366537A (en) | 1980-05-23 | 1982-12-28 | International Business Machines Corp. | Authorization mechanism for transfer of program control or data between different address spaces having different storage protect keys |
| US4403283A (en) | 1980-07-28 | 1983-09-06 | Ncr Corporation | Extended memory system and method |
| DE3034581A1 (en) | 1980-09-13 | 1982-04-22 | Robert Bosch Gmbh, 7000 Stuttgart | READ-OUT LOCK FOR ONE-CHIP MICROPROCESSORS |
| JPS58140862A (en) | 1982-02-16 | 1983-08-20 | Toshiba Corp | Mutual exclusion system |
| US4521852A (en) | 1982-06-30 | 1985-06-04 | Texas Instruments Incorporated | Data processing device formed on a single semiconductor substrate having secure memory |
| JPS59111561A (en) | 1982-12-17 | 1984-06-27 | Hitachi Ltd | Access control method for complex processor systems |
| US4759064A (en) | 1985-10-07 | 1988-07-19 | Chaum David L | Blind unanticipated signature systems |
| US4975836A (en) | 1984-12-19 | 1990-12-04 | Hitachi, Ltd. | Virtual computer system |
| JPS61206057A (en) | 1985-03-11 | 1986-09-12 | Hitachi Ltd | address translation device |
| JPS6273346A (en)* | 1985-09-27 | 1987-04-04 | Hitachi Ltd | address translation device |
| FR2592510B1 (en) | 1985-12-31 | 1988-02-12 | Bull Cp8 | METHOD AND APPARATUS FOR CERTIFYING SERVICES OBTAINED USING A PORTABLE MEDIUM SUCH AS A MEMORY CARD |
| SU1327113A2 (en)* | 1986-02-25 | 1987-07-30 | Военная академия им.Ф.Э.Дзержинского | Apparatus for controlling virtual memory |
| FR2601535B1 (en) | 1986-07-11 | 1988-10-21 | Bull Cp8 | METHOD FOR CERTIFYING THE AUTHENTICITY OF DATA EXCHANGED BETWEEN TWO DEVICES CONNECTED LOCALLY OR REMOTELY THROUGH A TRANSMISSION LINE |
| FR2601525B1 (en) | 1986-07-11 | 1988-10-21 | Bull Cp8 | SECURITY DEVICE PROHIBITING THE OPERATION OF AN ELECTRONIC ASSEMBLY AFTER A FIRST SHUTDOWN OF ITS POWER SUPPLY |
| FR2601476B1 (en) | 1986-07-11 | 1988-10-21 | Bull Cp8 | METHOD FOR AUTHENTICATING EXTERNAL AUTHORIZATION DATA BY A PORTABLE OBJECT SUCH AS A MEMORY CARD |
| US5038281A (en)* | 1986-09-19 | 1991-08-06 | International Business Machines Corporation | Acceleration of system interrupts between operating systems in guest-host relationship |
| JPS63156248A (en)* | 1986-12-19 | 1988-06-29 | Nec Corp | Virtual computer system |
| FR2618002B1 (en) | 1987-07-10 | 1991-07-05 | Schlumberger Ind Sa | METHOD AND SYSTEM FOR AUTHENTICATING ELECTRONIC MEMORY CARDS |
| US5007082A (en) | 1988-08-03 | 1991-04-09 | Kelly Services, Inc. | Computer software encryption apparatus |
| US5079737A (en) | 1988-10-25 | 1992-01-07 | United Technologies Corporation | Memory management unit for the MIL-STD 1750 bus |
| US5434999A (en) | 1988-11-09 | 1995-07-18 | Bull Cp8 | Safeguarded remote loading of service programs by authorizing loading in protected memory zones in a terminal |
| FR2640798B1 (en) | 1988-12-20 | 1993-01-08 | Bull Cp8 | DATA PROCESSING DEVICE COMPRISING AN ELECTRICALLY ERASABLE AND REPROGRAMMABLE NON-VOLATILE MEMORY |
| JPH02171934A (en) | 1988-12-26 | 1990-07-03 | Hitachi Ltd | virtual computer system |
| JPH02208740A (en) | 1989-02-09 | 1990-08-20 | Fujitsu Ltd | Virtual computer control system |
| US5781753A (en) | 1989-02-24 | 1998-07-14 | Advanced Micro Devices, Inc. | Semi-autonomous RISC pipelines for overlapped execution of RISC-like instructions within the multiple superscalar execution units of a processor having distributed pipeline control for speculative and out-of-order execution of complex instructions |
| US5442645A (en) | 1989-06-06 | 1995-08-15 | Bull Cp8 | Method for checking the integrity of a program or data, and apparatus for implementing this method |
| JP2590267B2 (en) | 1989-06-30 | 1997-03-12 | 株式会社日立製作所 | Display control method in virtual machine |
| US5022077A (en) | 1989-08-25 | 1991-06-04 | International Business Machines Corp. | Apparatus and method for preventing unauthorized access to BIOS in a personal computer system |
| JPH0388042A (en)* | 1989-08-31 | 1991-04-12 | Nec Corp | Program starting system in virtual computer environment |
| JP2825550B2 (en) | 1989-09-21 | 1998-11-18 | 株式会社日立製作所 | Multiple virtual space address control method and computer system |
| CA2010591C (en) | 1989-10-20 | 1999-01-26 | Phillip M. Adams | Kernels, description tables and device drivers |
| CA2027799A1 (en) | 1989-11-03 | 1991-05-04 | David A. Miller | Method and apparatus for independently resetting processors and cache controllers in multiple processor systems |
| US5075842A (en) | 1989-12-22 | 1991-12-24 | Intel Corporation | Disabling tag bit recognition and allowing privileged operations to occur in an object-oriented memory protection mechanism |
| EP0473913A3 (en) | 1990-09-04 | 1992-12-16 | International Business Machines Corporation | Method and apparatus for providing a service pool of virtual machines for a plurality of vm users |
| US5108590A (en) | 1990-09-12 | 1992-04-28 | Disanto Dennis | Water dispenser |
| US5230069A (en) | 1990-10-02 | 1993-07-20 | International Business Machines Corporation | Apparatus and method for providing private and shared access to host address and data spaces by guest programs in a virtual machine computer system |
| US5317705A (en) | 1990-10-24 | 1994-05-31 | International Business Machines Corporation | Apparatus and method for TLB purge reduction in a multi-level machine system |
| US5287363A (en) | 1991-07-01 | 1994-02-15 | Disk Technician Corporation | System for locating and anticipating data storage media failures |
| US5437033A (en) | 1990-11-16 | 1995-07-25 | Hitachi, Ltd. | System for recovery from a virtual machine monitor failure with a continuous guest dispatched to a nonguest mode |
| US5255379A (en) | 1990-12-28 | 1993-10-19 | Sun Microsystems, Inc. | Method for automatically transitioning from V86 mode to protected mode in a computer system using an Intel 80386 or 80486 processor |
| US5453003A (en) | 1991-01-09 | 1995-09-26 | Pfefferle; William C. | Catalytic method |
| JP3093293B2 (en)* | 1991-02-08 | 2000-10-03 | 日本電気株式会社 | Information processing device interrupt method |
| US5446904A (en) | 1991-05-17 | 1995-08-29 | Zenith Data Systems Corporation | Suspend/resume capability for a protected mode microprocessor |
| JPH04348434A (en) | 1991-05-27 | 1992-12-03 | Hitachi Ltd | Virtual computer system |
| US5319760A (en) | 1991-06-28 | 1994-06-07 | Digital Equipment Corporation | Translation buffer for virtual machines with address space match |
| US5522075A (en) | 1991-06-28 | 1996-05-28 | Digital Equipment Corporation | Protection ring extension for computers having distinct virtual machine monitor and virtual machine address spaces |
| US5455909A (en) | 1991-07-05 | 1995-10-03 | Chips And Technologies Inc. | Microprocessor with operation capture facility |
| JPH06236284A (en) | 1991-10-21 | 1994-08-23 | Intel Corp | Method for preservation and restoration of computer-system processing state and computer system |
| WO1993009494A1 (en)* | 1991-10-28 | 1993-05-13 | Digital Equipment Corporation | Fault-tolerant computer processing using a shadow virtual processor |
| US5627987A (en) | 1991-11-29 | 1997-05-06 | Kabushiki Kaisha Toshiba | Memory management and protection system for virtual memory in computer system |
| US5574936A (en) | 1992-01-02 | 1996-11-12 | Amdahl Corporation | Access control mechanism controlling access to and logical purging of access register translation lookaside buffer (ALB) in a computer system |
| US5486529A (en) | 1992-04-16 | 1996-01-23 | Zeneca Limited | Certain pyridyl ketones for treating diseases involving leukocyte elastase |
| US5421006A (en) | 1992-05-07 | 1995-05-30 | Compaq Computer Corp. | Method and apparatus for assessing integrity of computer system software |
| US5610981A (en) | 1992-06-04 | 1997-03-11 | Integrated Technologies Of America, Inc. | Preboot protection for a data security system with anti-intrusion capability |
| US5414851A (en)* | 1992-06-15 | 1995-05-09 | International Business Machines Corporation | Method and means for sharing I/O resources by a plurality of operating systems |
| US5237616A (en) | 1992-09-21 | 1993-08-17 | International Business Machines Corporation | Secure computer system having privileged and unprivileged memories |
| US5293424A (en) | 1992-10-14 | 1994-03-08 | Bull Hn Information Systems Inc. | Secure memory card |
| US5796835A (en) | 1992-10-27 | 1998-08-18 | Bull Cp8 | Method and system for writing information in a data carrier making it possible to later certify the originality of this information |
| US5371867A (en)* | 1992-11-10 | 1994-12-06 | International Business Machines Corporation | Method of using small addresses to access any guest zone in a large memory |
| EP0600112A1 (en) | 1992-11-30 | 1994-06-08 | Siemens Nixdorf Informationssysteme Aktiengesellschaft | Data processing system with virtual memory addressing and memory access controlled by keys |
| JP2765411B2 (en) | 1992-11-30 | 1998-06-18 | 株式会社日立製作所 | Virtual computer system |
| US5668971A (en) | 1992-12-01 | 1997-09-16 | Compaq Computer Corporation | Posted disk read operations performed by signalling a disk read complete to the system prior to completion of data transfer |
| EP0602867A1 (en) | 1992-12-17 | 1994-06-22 | NCR International, Inc. | An apparatus for securing a system platform |
| JPH06187178A (en) | 1992-12-18 | 1994-07-08 | Hitachi Ltd | Input and output interruption control method for virtual computer system |
| US5483656A (en) | 1993-01-14 | 1996-01-09 | Apple Computer, Inc. | System for managing power consumption of devices coupled to a common bus |
| US5469557A (en) | 1993-03-05 | 1995-11-21 | Microchip Technology Incorporated | Code protection in microcontroller with EEPROM fuses |
| FR2703800B1 (en) | 1993-04-06 | 1995-05-24 | Bull Cp8 | Method for signing a computer file, and device for implementing it. |
| FR2704341B1 (en) | 1993-04-22 | 1995-06-02 | Bull Cp8 | Device for protecting the keys of a smart card. |
| JPH06348867A (en) | 1993-06-04 | 1994-12-22 | Hitachi Ltd | Microcomputer |
| FR2706210B1 (en) | 1993-06-08 | 1995-07-21 | Bull Cp8 | Method for authenticating a portable object by an offline terminal, portable object and corresponding terminal. |
| US5555385A (en) | 1993-10-27 | 1996-09-10 | International Business Machines Corporation | Allocation of address spaces within virtual machine compute system |
| US5825880A (en) | 1994-01-13 | 1998-10-20 | Sudia; Frank W. | Multi-step digital signature method and system |
| US5459869A (en) | 1994-02-17 | 1995-10-17 | Spilo; Michael L. | Method for providing protected mode services for device drivers and other resident software |
| US5604805A (en) | 1994-02-28 | 1997-02-18 | Brands; Stefanus A. | Privacy-protected transfer of electronic information |
| FR2717286B1 (en) | 1994-03-09 | 1996-04-05 | Bull Cp8 | Method and device for authenticating a data medium intended to allow a transaction or access to a service or a place, and corresponding medium. |
| US5421066A (en)* | 1994-05-16 | 1995-06-06 | Bonomo; Melvin E. | Self-locking tensioning bar |
| US5684881A (en) | 1994-05-23 | 1997-11-04 | Matsushita Electric Industrial Co., Ltd. | Sound field and sound image control apparatus and method |
| US5473692A (en) | 1994-09-07 | 1995-12-05 | Intel Corporation | Roving software license for a hardware agent |
| US5539828A (en) | 1994-05-31 | 1996-07-23 | Intel Corporation | Apparatus and method for providing secured communications |
| US5533123A (en) | 1994-06-28 | 1996-07-02 | National Semiconductor Corporation | Programmable distributed personal security |
| US5978481A (en) | 1994-08-16 | 1999-11-02 | Intel Corporation | Modem compatible method and apparatus for encrypting data that is transparent to software applications |
| JPH0883211A (en) | 1994-09-12 | 1996-03-26 | Mitsubishi Electric Corp | Data processing device |
| DE69534757T2 (en) | 1994-09-15 | 2006-08-31 | International Business Machines Corp. | System and method for secure storage and distribution of data using digital signatures |
| US6058478A (en) | 1994-09-30 | 2000-05-02 | Intel Corporation | Apparatus and method for a vetted field upgrade |
| FR2725537B1 (en) | 1994-10-11 | 1996-11-22 | Bull Cp8 | METHOD FOR LOADING A PROTECTED MEMORY AREA OF AN INFORMATION PROCESSING DEVICE AND ASSOCIATED DEVICE |
| US5903752A (en) | 1994-10-13 | 1999-05-11 | Intel Corporation | Method and apparatus for embedding a real-time multi-tasking kernel in a non-real-time operating system |
| US5606617A (en) | 1994-10-14 | 1997-02-25 | Brands; Stefanus A. | Secret-key certificates |
| US5564040A (en) | 1994-11-08 | 1996-10-08 | International Business Machines Corporation | Method and apparatus for providing a server function in a logically partitioned hardware machine |
| US6269392B1 (en) | 1994-11-15 | 2001-07-31 | Christian Cotichini | Method and apparatus to monitor and locate an electronic device using a secured intelligent agent |
| US5560013A (en) | 1994-12-06 | 1996-09-24 | International Business Machines Corporation | Method of using a target processor to execute programs of a source architecture that uses multiple address spaces |
| US5555414A (en) | 1994-12-14 | 1996-09-10 | International Business Machines Corporation | Multiprocessing system including gating of host I/O and external enablement to guest enablement at polling intervals |
| US5615263A (en) | 1995-01-06 | 1997-03-25 | Vlsi Technology, Inc. | Dual purpose security architecture with protected internal operating system |
| US5764969A (en) | 1995-02-10 | 1998-06-09 | International Business Machines Corporation | Method and system for enhanced management operation utilizing intermixed user level and supervisory level instructions with partial concept synchronization |
| FR2731536B1 (en) | 1995-03-10 | 1997-04-18 | Schlumberger Ind Sa | METHOD FOR SECURE INFORMATION RECORDING ON A PORTABLE MEDIUM |
| US5717903A (en) | 1995-05-15 | 1998-02-10 | Compaq Computer Corporation | Method and appartus for emulating a peripheral device to allow device driver development before availability of the peripheral device |
| JP3451595B2 (en) | 1995-06-07 | 2003-09-29 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Microprocessor with architectural mode control capable of supporting extension to two distinct instruction set architectures |
| US5684948A (en) | 1995-09-01 | 1997-11-04 | National Semiconductor Corporation | Memory management circuit which provides simulated privilege levels |
| US5633929A (en) | 1995-09-15 | 1997-05-27 | Rsa Data Security, Inc | Cryptographic key escrow system having reduced vulnerability to harvesting attacks |
| US5737760A (en) | 1995-10-06 | 1998-04-07 | Motorola Inc. | Microcontroller with security logic circuit which prevents reading of internal memory by external program |
| US6093213A (en) | 1995-10-06 | 2000-07-25 | Advanced Micro Devices, Inc. | Flexible implementation of a system management mode (SMM) in a processor |
| US5606817B1 (en)* | 1995-10-18 | 1999-06-29 | Remington Arms Co Inc | Muzzle-loading firearm |
| JP3693721B2 (en) | 1995-11-10 | 2005-09-07 | Ｎｅｃエレクトロニクス株式会社 | Microcomputer with built-in flash memory and test method thereof |
| IL116708A (en) | 1996-01-08 | 2000-12-06 | Smart Link Ltd | Real-time task manager for a personal computer |
| JP2000503154A (en) | 1996-01-11 | 2000-03-14 | エムアールジェイ インコーポレイテッド | System for controlling access and distribution of digital ownership |
| US5657445A (en) | 1996-01-26 | 1997-08-12 | Dell Usa, L.P. | Apparatus and method for limiting access to mass storage devices in a computer system |
| IL117085A (en) | 1996-02-08 | 2005-07-25 | Milsys Ltd | Secure computer system |
| US5835594A (en) | 1996-02-09 | 1998-11-10 | Intel Corporation | Methods and apparatus for preventing unauthorized write access to a protected non-volatile storage |
| US5978892A (en) | 1996-05-03 | 1999-11-02 | Digital Equipment Corporation | Virtual memory allocation in a virtual address space having an inaccessible gap |
| US5809546A (en) | 1996-05-23 | 1998-09-15 | International Business Machines Corporation | Method for managing I/O buffers in shared storage by structuring buffer table having entries including storage keys for controlling accesses to the buffers |
| US6205550B1 (en) | 1996-06-13 | 2001-03-20 | Intel Corporation | Tamper resistant methods and apparatus |
| US6175925B1 (en) | 1996-06-13 | 2001-01-16 | Intel Corporation | Tamper resistant player for scrambled contents |
| US6178509B1 (en) | 1996-06-13 | 2001-01-23 | Intel Corporation | Tamper resistant methods and apparatus |
| US5729760A (en) | 1996-06-21 | 1998-03-17 | Intel Corporation | System for providing first type access to register if processor in first mode and second type access to register if processor not in first mode |
| US5757604A (en) | 1996-06-27 | 1998-05-26 | Raychem Corporation | Surge arrester having grooved and ridged terminals |
| US5944821A (en) | 1996-07-11 | 1999-08-31 | Compaq Computer Corporation | Secure software registration and integrity assessment in a computer system |
| US6199152B1 (en) | 1996-08-22 | 2001-03-06 | Transmeta Corporation | Translated memory protection apparatus for an advanced microprocessor |
| US5740178A (en) | 1996-08-29 | 1998-04-14 | Lucent Technologies Inc. | Software for controlling a reliable backup memory |
| WO1998012620A1 (en) | 1996-09-20 | 1998-03-26 | Mitsubishi Denki Kabushiki Kaisha | Microcomputer having reset control function |
| US6055637A (en) | 1996-09-27 | 2000-04-25 | Electronic Data Systems Corporation | System and method for accessing enterprise-wide resources by presenting to the resource a temporary credential |
| US5937063A (en) | 1996-09-30 | 1999-08-10 | Intel Corporation | Secure boot |
| US5844986A (en) | 1996-09-30 | 1998-12-01 | Intel Corporation | Secure BIOS |
| US5935242A (en) | 1996-10-28 | 1999-08-10 | Sun Microsystems, Inc. | Method and apparatus for initializing a device |
| JPH10134008A (en) | 1996-11-05 | 1998-05-22 | Mitsubishi Electric Corp | Semiconductor device and computer system |
| US5852717A (en) | 1996-11-20 | 1998-12-22 | Shiva Corporation | Performance optimizations for computer networks utilizing HTTP |
| DE19649292A1 (en) | 1996-11-28 | 1998-06-04 | Deutsche Telekom Ag | Access protection method for pay television |
| US5901225A (en) | 1996-12-05 | 1999-05-04 | Advanced Micro Devices, Inc. | System and method for performing software patches in embedded systems |
| US5757919A (en) | 1996-12-12 | 1998-05-26 | Intel Corporation | Cryptographically protected paging subsystem |
| US5818939A (en) | 1996-12-18 | 1998-10-06 | Intel Corporation | Optimized security functionality in an electronic system |
| US6412035B1 (en) | 1997-02-03 | 2002-06-25 | Real Time, Inc. | Apparatus and method for decreasing the response times of interrupt service routines |
| US6148401A (en) | 1997-02-05 | 2000-11-14 | At&T Corp. | System and method for providing assurance to a host that a piece of software possesses a particular property |
| US5953502A (en) | 1997-02-13 | 1999-09-14 | Helbig, Sr.; Walter A | Method and apparatus for enhancing computer system security |
| JP4000654B2 (en) | 1997-02-27 | 2007-10-31 | セイコーエプソン株式会社 | Semiconductor device and electronic equipment |
| EP0970411B1 (en) | 1997-03-27 | 2002-05-15 | BRITISH TELECOMMUNICATIONS public limited company | Copy protection of data |
| US6272637B1 (en) | 1997-04-14 | 2001-08-07 | Dallas Semiconductor Corporation | Systems and methods for protecting access to encrypted information |
| US6557104B2 (en) | 1997-05-02 | 2003-04-29 | Phoenix Technologies Ltd. | Method and apparatus for secure processing of cryptographic keys |
| US6044478A (en) | 1997-05-30 | 2000-03-28 | National Semiconductor Corporation | Cache with finely granular locked-down regions |
| US6075938A (en) | 1997-06-10 | 2000-06-13 | The Board Of Trustees Of The Leland Stanford Junior University | Virtual machine monitors for scalable multiprocessors |
| US5987557A (en) | 1997-06-19 | 1999-11-16 | Sun Microsystems, Inc. | Method and apparatus for implementing hardware protection domains in a system with no memory management unit (MMU) |
| US6175924B1 (en) | 1997-06-20 | 2001-01-16 | International Business Machines Corp. | Method and apparatus for protecting application data in secure storage areas |
| US6035374A (en) | 1997-06-25 | 2000-03-07 | Sun Microsystems, Inc. | Method of executing coded instructions in a multiprocessor having shared execution resources including active, nap, and sleep states in accordance with cache miss latency |
| US6584565B1 (en) | 1997-07-15 | 2003-06-24 | Hewlett-Packard Development Company, L.P. | Method and apparatus for long term verification of digital signatures |
| US6014745A (en) | 1997-07-17 | 2000-01-11 | Silicon Systems Design Ltd. | Protection for customer programs (EPROM) |
| US5978475A (en) | 1997-07-18 | 1999-11-02 | Counterpane Internet Security, Inc. | Event auditing system |
| US6212635B1 (en) | 1997-07-18 | 2001-04-03 | David C. Reardon | Network security system allowing access and modification to a security subsystem after initial installation when a master token is in place |
| US6188995B1 (en) | 1997-07-28 | 2001-02-13 | Apple Computer, Inc. | Method and apparatus for enforcing software licenses |
| US5919257A (en) | 1997-08-08 | 1999-07-06 | Novell, Inc. | Networked workstation intrusion detection system |
| DE19735948C1 (en) | 1997-08-19 | 1998-10-01 | Siemens Nixdorf Inf Syst | Method for improving controllability in data processing equipment with translation-look-aside-buffer (TLB) |
| US6282657B1 (en) | 1997-09-16 | 2001-08-28 | Safenet, Inc. | Kernel mode protection |
| US5935247A (en) | 1997-09-18 | 1999-08-10 | Geneticware Co., Ltd. | Computer system having a genetic code that cannot be directly accessed and a method of maintaining the same |
| US6148379A (en) | 1997-09-19 | 2000-11-14 | Silicon Graphics, Inc. | System, method and computer program product for page sharing between fault-isolated cells in a distributed shared memory system |
| US6182089B1 (en) | 1997-09-23 | 2001-01-30 | Silicon Graphics, Inc. | Method, system and computer program product for dynamically allocating large memory pages of different sizes |
| US5978834A (en) | 1997-09-30 | 1999-11-02 | The United States Of America As Represented By The Secretary Of The Navy | Platform independent computer interface software responsive to scripted commands |
| US6061794A (en) | 1997-09-30 | 2000-05-09 | Compaq Computer Corp. | System and method for performing secure device communications in a peer-to-peer bus architecture |
| US5970147A (en) | 1997-09-30 | 1999-10-19 | Intel Corporation | System and method for configuring and registering a cryptographic device |
| US6357004B1 (en) | 1997-09-30 | 2002-03-12 | Intel Corporation | System and method for ensuring integrity throughout post-processing |
| US5987604A (en) | 1997-10-07 | 1999-11-16 | Phoenix Technologies, Ltd. | Method and apparatus for providing execution of system management mode services in virtual mode |
| US6085296A (en) | 1997-11-12 | 2000-07-04 | Digital Equipment Corporation | Sharing memory pages and page tables among computer processes |
| US6219787B1 (en) | 1997-12-22 | 2001-04-17 | Texas Instruments Incorporated | Method and apparatus for extending security model to native code |
| US6378072B1 (en) | 1998-02-03 | 2002-04-23 | Compaq Computer Corporation | Cryptographic system |
| US6308270B1 (en) | 1998-02-13 | 2001-10-23 | Schlumberger Technologies, Inc. | Validating and certifying execution of a software program with a smart card |
| US6108644A (en) | 1998-02-19 | 2000-08-22 | At&T Corp. | System and method for electronic transactions |
| US6131166A (en) | 1998-03-13 | 2000-10-10 | Sun Microsystems, Inc. | System and method for cross-platform application level power management |
| US6192455B1 (en) | 1998-03-30 | 2001-02-20 | Intel Corporation | Apparatus and method for preventing access to SMRAM space through AGP addressing |
| US6374286B1 (en) | 1998-04-06 | 2002-04-16 | Rockwell Collins, Inc. | Real time processor capable of concurrently running multiple independent JAVA machines |
| CA2294182C (en)* | 1998-04-22 | 2007-10-09 | Peter Geiger | Construction kit made of concrete paving stones |
| US6173417B1 (en) | 1998-04-30 | 2001-01-09 | Intel Corporation | Initializing and restarting operating systems |
| US6339826B2 (en) | 1998-05-05 | 2002-01-15 | International Business Machines Corp. | Client-server system for maintaining a user desktop consistent with server application user access permissions |
| US6397242B1 (en) | 1998-05-15 | 2002-05-28 | Vmware, Inc. | Virtualization system including a virtual machine monitor for a computer with a segmented architecture |
| FR2778998B1 (en) | 1998-05-20 | 2000-06-30 | Schlumberger Ind Sa | METHOD FOR AUTHENTICATING A PERSONAL CODE OF A USER OF AN INTEGRATED CIRCUIT CARD |
| DE69942712D1 (en) | 1998-05-29 | 2010-10-14 | Texas Instruments Inc | Secure computing device |
| US6421702B1 (en) | 1998-06-09 | 2002-07-16 | Advanced Micro Devices, Inc. | Interrupt driven isochronous task scheduler system |
| AU748955B2 (en) | 1998-06-17 | 2002-06-13 | Aristocrat Technologies Australia Pty Limited | Software verification and authentication |
| US6339815B1 (en) | 1998-08-14 | 2002-01-15 | Silicon Storage Technology, Inc. | Microcontroller system having allocation circuitry to selectively allocate and/or hide portions of a program memory address space |
| US6505279B1 (en) | 1998-08-14 | 2003-01-07 | Silicon Storage Technology, Inc. | Microcontroller system having security circuitry to selectively lock portions of a program memory address space |
| JP2000076087A (en)* | 1998-08-28 | 2000-03-14 | Hitachi Ltd | Multi-operating system control method |
| US6363485B1 (en) | 1998-09-09 | 2002-03-26 | Entrust Technologies Limited | Multi-factor biometric authenticating device and method |
| US6463535B1 (en) | 1998-10-05 | 2002-10-08 | Intel Corporation | System and method for verifying the integrity and authorization of software before execution in a local platform |
| US6230248B1 (en) | 1998-10-12 | 2001-05-08 | Institute For The Development Of Emerging Architectures, L.L.C. | Method and apparatus for pre-validating regions in a virtual addressing scheme |
| US6609199B1 (en) | 1998-10-26 | 2003-08-19 | Microsoft Corporation | Method and apparatus for authenticating an open system application to a portable IC device |
| US7194092B1 (en) | 1998-10-26 | 2007-03-20 | Microsoft Corporation | Key-based secure storage |
| US6327652B1 (en) | 1998-10-26 | 2001-12-04 | Microsoft Corporation | Loading and identifying a digital rights management operating system |
| US6330670B1 (en) | 1998-10-26 | 2001-12-11 | Microsoft Corporation | Digital rights management operating system |
| US6445797B1 (en) | 1998-12-16 | 2002-09-03 | Secure Choice Llc | Method and system for performing secure electronic digital streaming |
| US6463537B1 (en) | 1999-01-04 | 2002-10-08 | Codex Technologies, Inc. | Modified computer motherboard security and identification system |
| US6282650B1 (en) | 1999-01-25 | 2001-08-28 | Intel Corporation | Secure public digital watermark |
| US6560627B1 (en) | 1999-01-28 | 2003-05-06 | Cisco Technology, Inc. | Mutual exclusion at the record level with priority inheritance for embedded systems using one semaphore |
| US7111290B1 (en) | 1999-01-28 | 2006-09-19 | Ati International Srl | Profiling program execution to identify frequently-executed portions and to assist binary translation |
| US6188257B1 (en) | 1999-02-01 | 2001-02-13 | Vlsi Technology, Inc. | Power-on-reset logic with secure power down capability |
| EP1030237A1 (en) | 1999-02-15 | 2000-08-23 | Hewlett-Packard Company | Trusted hardware device in a computer |
| US6272533B1 (en) | 1999-02-16 | 2001-08-07 | Hendrik A. Browne | Secure computer system and method of providing secure access to a computer system including a stand alone switch operable to inhibit data corruption on a storage device |
| US7225333B2 (en) | 1999-03-27 | 2007-05-29 | Microsoft Corporation | Secure processor architecture for use with a digital rights management (DRM) system on a computing device |
| US6615278B1 (en) | 1999-03-29 | 2003-09-02 | International Business Machines Corporation | Cross-platform program, system, and method having a global registry object for mapping registry equivalent functions in an OS/2 operating system environment |
| US6684326B1 (en) | 1999-03-31 | 2004-01-27 | International Business Machines Corporation | Method and system for authenticated boot operations in a computer system of a networked computing environment |
| US6651171B1 (en) | 1999-04-06 | 2003-11-18 | Microsoft Corporation | Secure execution of program code |
| HK1052568A1 (en) | 1999-04-12 | 2003-09-19 | Digital Media On Demand, Inc. (Dmod, Inc.) | Secure electronic commerce system |
| US6389537B1 (en)* | 1999-04-23 | 2002-05-14 | Intel Corporation | Platform and method for assuring integrity of trusted agent communications |
| US6275933B1 (en) | 1999-04-30 | 2001-08-14 | 3Com Corporation | Security system for a computerized apparatus |
| EP1055989A1 (en) | 1999-05-28 | 2000-11-29 | Hewlett-Packard Company | System for digitally signing a document |
| EP1056014A1 (en) | 1999-05-28 | 2000-11-29 | Hewlett-Packard Company | System for providing a trustworthy user interface |
| US6321314B1 (en) | 1999-06-09 | 2001-11-20 | Ati International S.R.L. | Method and apparatus for restricting memory access |
| US6633981B1 (en) | 1999-06-18 | 2003-10-14 | Intel Corporation | Electronic system and method for controlling access through user authentication |
| US6158546A (en) | 1999-06-25 | 2000-12-12 | Tenneco Automotive Inc. | Straight through muffler with conically-ended output passage |
| US6301646B1 (en) | 1999-07-30 | 2001-10-09 | Curl Corporation | Pointer verification system and method |
| US6529909B1 (en) | 1999-08-31 | 2003-03-04 | Accenture Llp | Method for translating an object attribute converter in an information services patterns environment |
| JP2001148344A (en) | 1999-09-09 | 2001-05-29 | Nikon Corp | Exposure apparatus, energy source output control method, laser apparatus using the method, and device manufacturing method |
| EP1085396A1 (en) | 1999-09-17 | 2001-03-21 | Hewlett-Packard Company | Operation of trusted state in computing platform |
| US6535988B1 (en) | 1999-09-29 | 2003-03-18 | Intel Corporation | System for detecting over-clocking uses a reference signal thereafter preventing over-clocking by reducing clock rate |
| US6374317B1 (en) | 1999-10-07 | 2002-04-16 | Intel Corporation | Method and apparatus for initializing a computer interface |
| GB9923804D0 (en) | 1999-10-08 | 1999-12-08 | Hewlett Packard Co | Electronic commerce system |
| GB9923802D0 (en) | 1999-10-08 | 1999-12-08 | Hewlett Packard Co | User authentication |
| US6292874B1 (en) | 1999-10-19 | 2001-09-18 | Advanced Technology Materials, Inc. | Memory management method and apparatus for partitioning homogeneous memory and restricting access of installed applications to predetermined memory ranges |
| WO2001063994A2 (en) | 2000-02-23 | 2001-08-30 | Iridian Technologies, Inc. | Tamper proof case for electronic devices having memories with sensitive information |
| AU2001251701A1 (en) | 2000-02-25 | 2001-09-03 | Identix Incorporated | Secure transaction system |
| WO2001065366A1 (en) | 2000-03-02 | 2001-09-07 | Alarity Corporation | System and method for process protection |
| JP3710671B2 (en) | 2000-03-14 | 2005-10-26 | シャープ株式会社 | One-chip microcomputer, IC card using the same, and access control method for one-chip microcomputer |
| CA2341931C (en) | 2000-03-24 | 2006-05-30 | Contentguard Holdings, Inc. | System and method for protection of digital works |
| US6990579B1 (en) | 2000-03-31 | 2006-01-24 | Intel Corporation | Platform and method for remote attestation of a platform |
| US6633963B1 (en) | 2000-03-31 | 2003-10-14 | Intel Corporation | Controlling access to multiple memory zones in an isolated execution environment |
| US6795905B1 (en) | 2000-03-31 | 2004-09-21 | Intel Corporation | Controlling accesses to isolated memory using a memory controller for isolated execution |
| US6507904B1 (en) | 2000-03-31 | 2003-01-14 | Intel Corporation | Executing isolated mode instructions in a secure system running in privilege rings |
| US6678825B1 (en) | 2000-03-31 | 2004-01-13 | Intel Corporation | Controlling access to multiple isolated memories in an isolated execution environment |
| US6789126B1 (en)* | 2000-05-09 | 2004-09-07 | Sun Microsystems, Inc. | Addressing message gates in a distributed computing environment |
| US6976162B1 (en) | 2000-06-28 | 2005-12-13 | Intel Corporation | Platform and method for establishing provable identities while maintaining privacy |
| GB0020416D0 (en) | 2000-08-18 | 2000-10-04 | Hewlett Packard Co | Trusted system |
| US20020062452A1 (en) | 2000-08-18 | 2002-05-23 | Warwick Ford | Countering credentials copying |
| US6938164B1 (en) | 2000-11-22 | 2005-08-30 | Microsoft Corporation | Method and system for allowing code to be securely initialized in a computer |
| EP1410170B1 (en)* | 2000-12-21 | 2010-01-20 | Microsoft Corporation | Logical substitution of processor control in an emulated computing environment |
| US7225441B2 (en)* | 2000-12-27 | 2007-05-29 | Intel Corporation | Mechanism for providing power management through virtualization |
| US6948065B2 (en) | 2000-12-27 | 2005-09-20 | Intel Corporation | Platform and method for securely transmitting an authorization secret |
| US7631160B2 (en) | 2001-04-04 | 2009-12-08 | Advanced Micro Devices, Inc. | Method and apparatus for securing portions of memory |
| WO2002086684A2 (en) | 2001-04-24 | 2002-10-31 | Hewlett-Packard Company | An information security system |
| US6976136B2 (en) | 2001-05-07 | 2005-12-13 | National Semiconductor Corporation | Flash memory protection scheme for secured shared BIOS implementation in personal computers with an embedded controller |
| US7676430B2 (en) | 2001-05-09 | 2010-03-09 | Lenovo (Singapore) Ptd. Ltd. | System and method for installing a remote credit card authorization on a system with a TCPA complaint chipset |
| US6789156B1 (en)* | 2001-05-22 | 2004-09-07 | Vmware, Inc. | Content-based, transparent sharing of memory units |
| EP1271277A3 (en) | 2001-06-26 | 2003-02-05 | Redstrike B.V. | Security system and software to prevent unauthorized use of a computing device |
| US6762838B2 (en) | 2001-07-02 | 2004-07-13 | Tevet Process Control Technologies Ltd. | Method and apparatus for production line screening |
| US20030018892A1 (en) | 2001-07-19 | 2003-01-23 | Jose Tello | Computer with a modified north bridge, security engine and smart card having a secure boot capability and method for secure booting a computer |
| US7191464B2 (en) | 2001-10-16 | 2007-03-13 | Lenovo Pte. Ltd. | Method and system for tracking a secure boot in a trusted computing environment |
| US7103771B2 (en) | 2001-12-17 | 2006-09-05 | Intel Corporation | Connecting a virtual token to a physical token |
| US20030126454A1 (en) | 2001-12-28 | 2003-07-03 | Glew Andrew F. | Authenticated code method and apparatus |
| US7308576B2 (en) | 2001-12-31 | 2007-12-11 | Intel Corporation | Authenticated code module |
| US20030126453A1 (en) | 2001-12-31 | 2003-07-03 | Glew Andrew F. | Processor supporting execution of an authenticated code instruction |
| US7107460B2 (en) | 2002-02-15 | 2006-09-12 | International Business Machines Corporation | Method and system for securing enablement access to a data security device |
| US7343493B2 (en) | 2002-03-28 | 2008-03-11 | Lenovo (Singapore) Pte. Ltd. | Encrypted file system using TCPA |
| US6725289B1 (en)* | 2002-04-17 | 2004-04-20 | Vmware, Inc. | Transparent address remapping for high-speed I/O |
| US7318141B2 (en) | 2002-12-17 | 2008-01-08 | Intel Corporation | Methods and systems to control virtual machines |
- 2000
- 2000-12-27USUS09/752,587patent/US7035963B2/ennot_activeExpired - Fee Related
- 2001
- 2001-12-20CNCN2010101495395Apatent/CN101826030B/ennot_activeExpired - Fee Related
- 2001-12-20RURU2003123112/09Apatent/RU2259582C2/ennot_activeIP Right Cessation
- 2001-12-20JPJP2002556364Apatent/JP4021769B2/ennot_activeExpired - Fee Related
- 2001-12-20EPEP01998106Apatent/EP1405181A2/ennot_activeWithdrawn
- 2001-12-20AUAU2002249862Apatent/AU2002249862A1/ennot_activeAbandoned
- 2001-12-20BRBR0116630-1Apatent/BR0116630A/ennot_activeApplication Discontinuation
- 2001-12-20KRKR1020037008770Apatent/KR100624668B1/ennot_activeExpired - Fee Related
- 2001-12-20WOPCT/US2001/050415patent/WO2002056172A2/enactiveApplication Filing
- 2001-12-20CNCN018228372Apatent/CN1575453B/ennot_activeExpired - Fee Related
- 2001-12-24TWTW090132036Apatent/TWI228221B/ennot_activeIP Right Cessation
- 2003
- 2003-09-30USUS10/676,737patent/US7020738B2/ennot_activeExpired - Fee Related
Also Published As
| Publication number | Publication date |
|---|---|
| RU2003123112A (en) | 2005-02-27 |
| CN101826030B (en) | 2012-12-05 |
| RU2259582C2 (en) | 2005-08-27 |
| TWI228221B (en) | 2005-02-21 |
| US20030120856A1 (en) | 2003-06-26 |
| KR100624668B1 (en) | 2006-09-18 |
| WO2002056172A3 (en) | 2004-01-08 |
| CN1575453A (en) | 2005-02-02 |
| CN1575453B (en) | 2011-01-12 |
| KR20030097798A (en) | 2003-12-31 |
| US7035963B2 (en) | 2006-04-25 |
| US7020738B2 (en) | 2006-03-28 |
| US20040064813A1 (en) | 2004-04-01 |
| JP2004526229A (en) | 2004-08-26 |
| JP4021769B2 (en) | 2007-12-12 |
| BR0116630A (en) | 2004-09-28 |
| AU2002249862A1 (en) | 2002-07-24 |
| WO2002056172A2 (en) | 2002-07-18 |
| EP1405181A2 (en) | 2004-04-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101826030B (en) | Method for Solving Address Space Conflict Between Virtual Machine Monitor and Guest Operating System | |
| RU2547705C2 (en) | Translation of input/output addresses to memory addresses | |
| CN101520753B (en) | Data processing apparatus and method for controlling access to secure memory by virtual machines executing on processing circuirty | |
| CN102906692B (en) | Method and system for modifying adapter function parameters | |
| JP3268310B2 (en) | Memory management method | |
| US5317754A (en) | Method and apparatus for enabling an interpretive execution subset | |
| JP5735070B2 (en) | Guest address to host address translation for devices to access memory in partitioned systems | |
| CN101631328B (en) | Synchronous method performing mutual exclusion access on shared resource, device and network equipment | |
| CN102906701B (en) | Control the method and system of the access to adapter in a computing environment | |
| CN1991808B (en) | Method and apparatus for a guest to access a memory mapped device | |
| KR101179341B1 (en) | Performing direct cache access transactions based on a memory access data structure | |
| CN102906704A (en) | Controlling a rate at which adapter interruption requests are processed | |
| CN1561485A (en) | New processor mode for limiting guest software operations running on a virtual machine supported by a virtual machine monitor | |
| EP0690385A1 (en) | Method and apparatus for managing memory in a computer system | |
| CN101681269A (en) | Adaptive Dynamic Selection and Application of Multi-Virtualization Technology | |
| CN102906716A (en) | Multiple address spaces per adapter | |
| US20190339975A1 (en) | Separate Branch Target Buffers for Different Levels of Calls | |
| CN101371232A (en) | Providing a backing store in user-level memory | |
| US6094664A (en) | Method and apparatus for optimizing the null pointer exception in an object-oriented programming environment with statically typed variables | |
| US5450561A (en) | Cache miss prediction method and apparatus for use with a paged main memory in a data processing system | |
| CN101882113A (en) | A Memory Virtualization Method Based on Guest Operating System Kernel Code Replacement | |
| US20040117568A1 (en) | Bridging memory access across pre-boot and runtime phases | |
| CN107315631A (en) | A kind of method for scheduling task and device | |
| Sternberger | Spectre-ng: An avalanche of attacks | |
| US20070156386A1 (en) | Linearization of page based memory for increased performance in a software emulated central processing unit |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee | Granted publication date:20121205 Termination date:20171220 |